PaloAlto | CLI Command

 PaloAlto - CLI Access Mode

>  show system info | match ip-address
# run show system info
# commit description tets-SAVE
>ping host 8.8.8.8
>find command
>find command keyword show
>find command keyword debug

Create User Local
username: admin pass: admin123
>configure
set mgt-config users admin phash admin123

Config IP Management
set deviceconfig system type static
set deviceconfig system ip-address 172.16.10.254 netmask 255.255.255.0 default-gateway 172.16.10.1

show device config
set deviceconfig system ip-address 10.100.100.150
set deviceconfig system netmask 255.255.255.0
set deviceconfig system hostname FW-PA
set deviceconfig system default-gateway 10.100.100.1
set deviceconfig system dns-setting servers primary 8.8.8.8
commit
exit

ADD Verifikasi:
Check OS Palo Version:
>debug swm list

>show routing route
>show routing fib
>test routing fib-lookup ecmp source-ip 10.0.137.254 virtual-router default ip 8.8.8.8

admin@PA-FW-01> show routing fib
admin@PA-FW-01> show routing route
admin@PA-FW-01> show routing route type static

Verifikasi IPSec Tunnel
> show vpn flow name <tunnel name
> show vpn ipsec-sa tunnel <tunnel name>

Verifikasi Resource
>show system resources follow
>show running resource-monitor

Verifikasi HA
>show high-availability all
>show high-availability interface < ha1 | ha2 | ha3 >

Verifikasi & Check Port INterface
> show system state filter-pretty sys.s1.*
> show system state filter-pretty sys.s1.p3.*
> show system state filter-pretty sys.s1.p3.phy
> show interface ethernet1/3.1012

Check Sesion Check
> show session id 2456388

Check SSL-decrypt certificate
show system setting ssl-decrypt certificate

Verifikasi NAT session
show session all filter nat source

Menampilkan User Login
show user ip-user-mapping all
----------------------------------------------
palo alto

Berbagi :